CVE-2020-7869
- State
- Published
- Severity
- 9.0 Critical
- Published
- Jun 29, 2021
- Updated
- Aug 4, 2024
- Reserved
- Jan 22, 2020
Description
An improper input validation vulnerability of ZOOK software (remote administration tool) could allow a remote attacker to create arbitrary file. The ZOOK viewer has the "Tight file CMD" function to create file. An attacker could create and execute arbitrary file in the ZOOK agent program using "Tight file CMD" without authority.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 9.0 Critical | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H | krcert |
Weaknesses
- CWE-20 Improper Input Validation
Affected Products
| Product | Versions |
|---|---|
ZOOKmastersoft |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.